Kernel | Title | Repro | Cause bisect | Fix bisect | Count | Last | Reported | Patched | Status |
---|---|---|---|---|---|---|---|---|---|
upstream | KCSAN: data-race in dccp_fin / sock_alloc_send_pskb (2) dccp | 1 | 1760d | 1760d | 0/28 | closed as invalid on 2020/06/18 14:13 |
syzbot |
sign-in | mailing list | source | docs |
Kernel | Title | Repro | Cause bisect | Fix bisect | Count | Last | Reported | Patched | Status |
---|---|---|---|---|---|---|---|---|---|
upstream | KCSAN: data-race in dccp_fin / sock_alloc_send_pskb (2) dccp | 1 | 1760d | 1760d | 0/28 | closed as invalid on 2020/06/18 14:13 |
================================================================== BUG: KCSAN: data-race in dccp_fin / sock_alloc_send_pskb write to 0xffff8880ad2a7b2a of 1 bytes by interrupt on cpu 0: dccp_fin+0x29/0x70 net/dccp/input.c:38 dccp_rcv_reset+0x12e/0x1d0 net/dccp/input.c:152 __dccp_rcv_established.isra.0+0x165/0x210 net/dccp/input.c:309 dccp_rcv_established net/dccp/input.c:376 [inline] dccp_rcv_established+0x9c/0xc0 net/dccp/input.c:364 dccp_v4_do_rcv+0xce/0x100 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:949 [inline] __sk_receive_skb+0x1b5/0x580 net/core/sock.c:519 dccp_v4_rcv+0x99f/0xf9b net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x4d/0x420 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x110/0x140 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ip_local_deliver+0x133/0x210 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0x123/0x160 net/ipv4/ip_input.c:428 NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ip_rcv+0x18f/0x1a0 net/ipv4/ip_input.c:538 __netif_receive_skb_one_core+0xa7/0xe0 net/core/dev.c:5150 __netif_receive_skb+0x37/0xf0 net/core/dev.c:5264 process_backlog+0x207/0x4b0 net/core/dev.c:6095 napi_poll net/core/dev.c:6532 [inline] net_rx_action+0x3ae/0xa90 net/core/dev.c:6600 __do_softirq+0x115/0x33f kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1082 do_softirq.part.0+0x6b/0x80 kernel/softirq.c:337 do_softirq kernel/softirq.c:329 [inline] __local_bh_enable_ip+0x76/0x80 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:690 [inline] ip_finish_output2+0x421/0xea0 net/ipv4/ip_output.c:229 __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x23a/0x490 net/ipv4/ip_output.c:290 ip_finish_output+0x41/0x160 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip_output+0xfe/0x230 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x74/0x90 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x3a8/0xa40 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x60 include/net/ip.h:237 dccp_transmit_skb+0x5a2/0x940 net/dccp/output.c:138 dccp_send_reset+0x162/0x180 net/dccp/output.c:526 dccp_close+0x237/0x8e0 net/dccp/proto.c:1035 inet_release+0x86/0x100 net/ipv4/af_inet.c:427 inet6_release+0x4a/0x70 net/ipv6/af_inet6.c:470 __sock_release+0x85/0x160 net/socket.c:592 sock_close+0x24/0x30 net/socket.c:1270 __fput+0x1e1/0x520 fs/file_table.c:280 ____fput+0x1f/0x30 fs/file_table.c:313 task_work_run+0xf6/0x130 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop+0x2b4/0x2c0 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] syscall_return_slowpath arch/x86/entry/common.c:278 [inline] do_syscall_64+0x384/0x3a0 arch/x86/entry/common.c:304 entry_SYSCALL_64_after_hwframe+0x44/0xa9 read to 0xffff8880ad2a7b2a of 1 bytes by task 15277 on cpu 1: sock_alloc_send_pskb+0xe9/0x530 net/core/sock.c:2227 sock_alloc_send_skb+0x3b/0x50 net/core/sock.c:2259 dccp_sendmsg+0x15c/0x7b0 net/dccp/proto.c:786 inet_sendmsg+0x6d/0x90 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:639 [inline] sock_sendmsg+0x9f/0xc0 net/socket.c:659 ____sys_sendmsg+0x212/0x4d0 net/socket.c:2330 ___sys_sendmsg+0xb5/0x100 net/socket.c:2384 __sys_sendmmsg+0x123/0x350 net/socket.c:2474 __do_sys_sendmmsg net/socket.c:2503 [inline] __se_sys_sendmmsg net/socket.c:2500 [inline] __x64_sys_sendmmsg+0x64/0x80 net/socket.c:2500 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 15277 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ==================================================================
Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2020/02/11 18:47 | https://github.com/google/ktsan.git kcsan | f60f0f543333 | 4d1ab643 | .config | console log | report | ci2-upstream-kcsan-gce | |||||
2020/02/02 09:09 | https://github.com/google/ktsan.git kcsan | 245a43005292 | 2274ad39 | .config | console log | report | ci2-upstream-kcsan-gce | |||||
2019/12/18 09:29 | https://github.com/google/ktsan.git kcsan | 245a43005292 | 64ca0a37 | .config | console log | report | ci2-upstream-kcsan-gce | |||||
2019/12/03 19:04 | https://github.com/google/ktsan.git kcsan | ef798c30ba4e | 0ecb9746 | .config | console log | report | ci2-upstream-kcsan-gce |